Vulnerability-Lookup

RHSA-2022:6443

Vulnerability from csaf_redhat - Published: 2022-09-13 09:57 - Updated: 2026-08-04 12:39

Summary

Red Hat Security Advisory: mariadb:10.3 security and bug fix update

Severity

Moderate

Notes

Topic: An update for the mariadb:10.3 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: mariadb (10.3.35), galera (25.3.35). Security Fix(es): * mariadb: MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used (CVE-2021-46669) * mysql: Server: FTS unspecified vulnerability (CPU Apr 2022) (CVE-2022-21427) * mariadb: lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer (CVE-2022-24048) * mariadb: lack of validating the existence of an object prior to performing operations on the object (CVE-2022-24050) * mariadb: lack of proper validation of a user-supplied string before using it as a format specifier (CVE-2022-24051) * mariadb: CONNECT storage engine heap-based buffer overflow (CVE-2022-24052) * mariadb: assertion failure in Item_args::walk_arg (CVE-2022-27376) * mariadb: use-after-poison when complex conversion is involved in blob (CVE-2022-27377) * mariadb: server crash in create_tmp_table::finalize (CVE-2022-27378) * mariadb: server crash in component arg_comparator::compare_real_fixed (CVE-2022-27379) * mariadb: server crash at my_decimal::operator= (CVE-2022-27380) * mariadb: server crash at Field::set_default via specially crafted SQL statements (CVE-2022-27381) * mariadb: use-after-poison in my_strcasecmp_8bit() of ctype-simple.c (CVE-2022-27383) * mariadb: crash via component Item_subselect::init_expr_cache_tracker (CVE-2022-27384) * mariadb: server crashes in query_arena::set_query_arena upon SELECT from view (CVE-2022-27386) * mariadb: assertion failures in decimal_bin_size (CVE-2022-27387) * mariadb: assertion failure in compare_order_elements (CVE-2022-27445) * mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27447) * mariadb: crash in multi-update and implicit grouping (CVE-2022-27448) * mariadb: assertion failure in sql/item_func.cc (CVE-2022-27449) * mariadb: assertion failure in sql/item_cmpfunc.cc (CVE-2022-27452) * mariadb: assertion failure in VDec::VDec at /sql/sql_type.cc (CVE-2022-27456) * mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27458) * mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31622) * mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31623) * mariadb: server crash at Item_subselect::init_expr_cache_tracker (CVE-2022-32083) * mariadb: server crash in Item_func_in::cleanup/Item::cleanup_processor (CVE-2022-32085) * mariadb: server crash in Item_args::walk_args (CVE-2022-32087) * mariadb: segmentation fault in Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort (CVE-2022-32088) * mariadb: Crash executing query with VIEW, aggregate and subquery (CVE-2021-46659) * mariadb: MariaDB allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE) (CVE-2021-46661) * mariadb: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements (CVE-2021-46663) * mariadb: MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr (CVE-2021-46664) * mariadb: MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations (CVE-2021-46665) * mariadb: MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements (CVE-2021-46668) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * [Tracker] Rebase to Galera 25.3.35 for MariaDB-10.3 (BZ#2107075)

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2021-46659

MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 115 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:Judy-0:1.0.5-18.module+el8+2765+cfa4f87b.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:Judy-0:1.0.5-18.module+el8+2765+cfa4f87b.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:Judy-0:1.0.5-18.module+el8+2765+cfa4f87b.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:Judy-0:1.0.5-18.module+el8+2765+cfa4f87b.src::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:Judy-0:1.0.5-18.module+el8+2765+cfa4f87b.x86_64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:Judy-debuginfo-0:1.0.5-18.module+el8+2765+cfa4f87b.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:Judy-debuginfo-0:1.0.5-18.module+el8+2765+cfa4f87b.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:Judy-debuginfo-0:1.0.5-18.module+el8+2765+cfa4f87b.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:Judy-debuginfo-0:1.0.5-18.module+el8+2765+cfa4f87b.x86_64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:Judy-debugsource-0:1.0.5-18.module+el8+2765+cfa4f87b.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:Judy-debugsource-0:1.0.5-18.module+el8+2765+cfa4f87b.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:Judy-debugsource-0:1.0.5-18.module+el8+2765+cfa4f87b.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:Judy-debugsource-0:1.0.5-18.module+el8+2765+cfa4f87b.x86_64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:galera-0:25.3.35-1.module+el8.6.0+15949+4ba4ec26.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:galera-0:25.3.35-1.module+el8.6.0+15949+4ba4ec26.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:galera-0:25.3.35-1.module+el8.6.0+15949+4ba4ec26.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:galera-0:25.3.35-1.module+el8.6.0+15949+4ba4ec26.src::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:galera-0:25.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:galera-debuginfo-0:25.3.35-1.module+el8.6.0+15949+4ba4ec26.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:galera-debuginfo-0:25.3.35-1.module+el8.6.0+15949+4ba4ec26.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:galera-debuginfo-0:25.3.35-1.module+el8.6.0+15949+4ba4ec26.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:galera-debuginfo-0:25.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:galera-debugsource-0:25.3.35-1.module+el8.6.0+15949+4ba4ec26.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:galera-debugsource-0:25.3.35-1.module+el8.6.0+15949+4ba4ec26.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:galera-debugsource-0:25.3.35-1.module+el8.6.0+15949+4ba4ec26.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:galera-debugsource-0:25.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.src::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-backup-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-backup-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-backup-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-backup-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-backup-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-backup-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-backup-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-backup-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-common-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-common-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-common-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-common-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-debugsource-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-debugsource-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-debugsource-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-debugsource-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-devel-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-devel-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-devel-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-devel-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-embedded-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-embedded-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-embedded-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-embedded-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-embedded-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-embedded-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-embedded-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-embedded-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-embedded-devel-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-embedded-devel-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-embedded-devel-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-embedded-devel-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-errmsg-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-errmsg-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-errmsg-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-errmsg-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-gssapi-server-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-gssapi-server-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-gssapi-server-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-gssapi-server-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-gssapi-server-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-gssapi-server-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-gssapi-server-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-gssapi-server-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-oqgraph-engine-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-oqgraph-engine-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-oqgraph-engine-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-oqgraph-engine-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-oqgraph-engine-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-oqgraph-engine-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-oqgraph-engine-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-oqgraph-engine-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-server-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-server-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-server-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-server-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-server-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-server-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-server-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-server-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-server-galera-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-server-galera-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-server-galera-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-server-galera-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-server-utils-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-server-utils-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-server-utils-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-server-utils-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-server-utils-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-server-utils-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-server-utils-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-server-utils-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-test-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-test-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-test-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-test-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-test-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.aarch64::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-test-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.ppc64le::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-test-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.s390x::mariadb:10.3	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.Z.MAIN.EUS:mariadb-test-debuginfo-3:10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64::mariadb:10.3	—	Vendor Fix fix

Threats

Impact Low

CVE-2021-46661

MariaDB through 10.5.9 allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE).

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Low

CVE-2021-46663

MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Low

CVE-2021-46664

MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Low

CVE-2021-46665

MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Low

CVE-2021-46668

MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Low

CVE-2021-46669

A use-after-free vulnerability was found in MariaDB. This flaw allows attackers to trigger a convert_const_to_int() use-after-free when the BIGINT data type is used, resulting in a denial of service.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-21427

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-21595

Vulnerability in the MySQL Server product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-24048

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16191.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-24050

MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16207.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-1173 - Improper Use of Validation Framework

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-24051

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of a user-supplied string before using it as a format specifier. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16193.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-134 - Use of Externally-Controlled Format String

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-24052

A flaw was found in MariaDB. Lack of input validation leads to a heap buffer overflow. This flaw allows an authenticated, local attacker with at least a low level of privileges to submit a crafted SQL query to MariaDB and escalate their privileges to the level of the MariaDB service user, running arbitrary code.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27376

A use-after-free flaw was found in Maria DB. The MariaDB Server contains a use-after-free in the component, Item_args::walk_arg, which is exploited via specially crafted SQL statements, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27377

A flaw was found in the MariaDB Server, where it contains a use-after-free in the component, Item_func_in::cleanup(). This issue is exploited via specially crafted SQL statements, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27378

A flaw was found in MariaDB. The component, Create_tmp_table::finalize, allows attackers to cause a denial of service (DoS) via specially crafted SQL statements, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27379

A flaw was found in MariaDB. The component, Arg_comparator::compare_real_fixed, allows attackers to cause a denial of service (DoS) via specially crafted SQL statements, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27380

A flaw was found in MariaDB. The component, my_decimal::operator=, allows attackers to cause a denial of service (DoS) via specially crafted SQL statements, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27381

A flaw was found in MariaDB. The component, Field::set_default, allows attackers to cause a denial of service (DoS) via specially crafted SQL statements, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27383

A flaw was found in the MariaDB Server. A use-after-free in the component, my_strcasecmp_8bit, can be exploited via specially crafted SQL statements, impacting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27384

A flaw was found in MariaDB. An issue in the component, Item_subselect::init_expr_cache_tracker of the MariaDB Server, allows attackers to cause a denial of service (DoS) via specially crafted SQL statements, impacting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27386

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/sql_class.cc, impacting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27387

A flaw was found in the MariaDB Server. It contains a global buffer overflow in the component, decimal_bin_size, which is exploited via specially crafted SQL statements, impacting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27445

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/sql_window.cc, impacting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27447

A flaw was found in the MariaDB Server. It contains a use-after-free via the component,Binary_string::free_buffer() at /sql/sql_string.h, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27448

An assertion failure was found in the MariaDB Server. This issue is via, 'node->pcur->rel_pos == BTR_PCUR_ON' at /row/row0mysql.cc, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27449

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/item_func.cc:148, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27452

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/item_cmpfunc.cc, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27456

A flaw was found in the MariaDB Server. It contains a use-after-free in the component, VDec::VDec at /sql/sql_type.cc, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27458

A flaw was found in the MariaDB Server. It contains a use-after-free in the component, Binary_string::free_buffer() at /sql/sql_string.h, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-31622

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (pthread_create returns a nonzero value) while executing the method create_worker_threads, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-404 - Improper Resource Shutdown or Release

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-31623

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (i.e., going to the err label) while executing the method create_worker_threads, the held lock thd->ctrl_mutex is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-667 - Improper Locking

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-32083

MariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component Item_subselect::init_expr_cache_tracker.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-229 - Improper Handling of Values

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-32085

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_func_in::cleanup/Item::cleanup_processor.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-229 - Improper Handling of Values

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-32087

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-229 - Improper Handling of Values

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-32088

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-229 - Improper Handling of Values

Affected products

Fixed 115 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

References

183 references

URL	Category
https://access.redhat.com/errata/RHSA-2022:6443	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2049302	external
https://bugzilla.redhat.com/show_bug.cgi?id=2050017	external
https://bugzilla.redhat.com/show_bug.cgi?id=2050022	external
https://bugzilla.redhat.com/show_bug.cgi?id=2050024	external
https://bugzilla.redhat.com/show_bug.cgi?id=2050026	external
https://bugzilla.redhat.com/show_bug.cgi?id=2050032	external
https://bugzilla.redhat.com/show_bug.cgi?id=2050034	external
https://bugzilla.redhat.com/show_bug.cgi?id=2068211	external
https://bugzilla.redhat.com/show_bug.cgi?id=2068233	external
https://bugzilla.redhat.com/show_bug.cgi?id=2068234	external
https://bugzilla.redhat.com/show_bug.cgi?id=2069833	external
https://bugzilla.redhat.com/show_bug.cgi?id=2074817	external
https://bugzilla.redhat.com/show_bug.cgi?id=2074947	external
https://bugzilla.redhat.com/show_bug.cgi?id=2074949	external
https://bugzilla.redhat.com/show_bug.cgi?id=2074951	external
https://bugzilla.redhat.com/show_bug.cgi?id=2074966	external
https://bugzilla.redhat.com/show_bug.cgi?id=2074981	external
https://bugzilla.redhat.com/show_bug.cgi?id=2074996	external
https://bugzilla.redhat.com/show_bug.cgi?id=2074999	external
https://bugzilla.redhat.com/show_bug.cgi?id=2075005	external
https://bugzilla.redhat.com/show_bug.cgi?id=2075006	external
https://bugzilla.redhat.com/show_bug.cgi?id=2075691	external
https://bugzilla.redhat.com/show_bug.cgi?id=2075693	external
https://bugzilla.redhat.com/show_bug.cgi?id=2075694	external
https://bugzilla.redhat.com/show_bug.cgi?id=2075695	external
https://bugzilla.redhat.com/show_bug.cgi?id=2075697	external
https://bugzilla.redhat.com/show_bug.cgi?id=2075700	external
https://bugzilla.redhat.com/show_bug.cgi?id=2076145	external
https://bugzilla.redhat.com/show_bug.cgi?id=2082644	external
https://bugzilla.redhat.com/show_bug.cgi?id=2092354	external
https://bugzilla.redhat.com/show_bug.cgi?id=2092360	external
https://bugzilla.redhat.com/show_bug.cgi?id=2104425	external
https://bugzilla.redhat.com/show_bug.cgi?id=2104431	external
https://bugzilla.redhat.com/show_bug.cgi?id=2104434	external
https://bugzilla.redhat.com/show_bug.cgi?id=2106008	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2021-46659	self
https://bugzilla.redhat.com/show_bug.cgi?id=2049302	external
https://www.cve.org/CVERecord?id=CVE-2021-46659	external
https://nvd.nist.gov/vuln/detail/CVE-2021-46659	external
https://access.redhat.com/security/cve/CVE-2021-46661	self
https://bugzilla.redhat.com/show_bug.cgi?id=2050017	external
https://www.cve.org/CVERecord?id=CVE-2021-46661	external
https://nvd.nist.gov/vuln/detail/CVE-2021-46661	external
https://access.redhat.com/security/cve/CVE-2021-46663	self
https://bugzilla.redhat.com/show_bug.cgi?id=2050022	external
https://www.cve.org/CVERecord?id=CVE-2021-46663	external
https://nvd.nist.gov/vuln/detail/CVE-2021-46663	external
https://access.redhat.com/security/cve/CVE-2021-46664	self
https://bugzilla.redhat.com/show_bug.cgi?id=2050024	external
https://www.cve.org/CVERecord?id=CVE-2021-46664	external
https://nvd.nist.gov/vuln/detail/CVE-2021-46664	external
https://access.redhat.com/security/cve/CVE-2021-46665	self
https://bugzilla.redhat.com/show_bug.cgi?id=2050026	external
https://www.cve.org/CVERecord?id=CVE-2021-46665	external
https://nvd.nist.gov/vuln/detail/CVE-2021-46665	external
https://access.redhat.com/security/cve/CVE-2021-46668	self
https://bugzilla.redhat.com/show_bug.cgi?id=2050032	external
https://www.cve.org/CVERecord?id=CVE-2021-46668	external
https://nvd.nist.gov/vuln/detail/CVE-2021-46668	external
https://access.redhat.com/security/cve/CVE-2021-46669	self
https://bugzilla.redhat.com/show_bug.cgi?id=2050034	external
https://www.cve.org/CVERecord?id=CVE-2021-46669	external
https://nvd.nist.gov/vuln/detail/CVE-2021-46669	external
https://access.redhat.com/security/cve/CVE-2022-21427	self
https://bugzilla.redhat.com/show_bug.cgi?id=2082644	external
https://www.cve.org/CVERecord?id=CVE-2022-21427	external
https://nvd.nist.gov/vuln/detail/CVE-2022-21427	external
https://access.redhat.com/security/cve/CVE-2022-21595	self
https://bugzilla.redhat.com/show_bug.cgi?id=2142862	external
https://www.cve.org/CVERecord?id=CVE-2022-21595	external
https://nvd.nist.gov/vuln/detail/CVE-2022-21595	external
https://access.redhat.com/security/cve/CVE-2022-24048	self
https://bugzilla.redhat.com/show_bug.cgi?id=2068234	external
https://www.cve.org/CVERecord?id=CVE-2022-24048	external
https://nvd.nist.gov/vuln/detail/CVE-2022-24048	external
https://access.redhat.com/security/cve/CVE-2022-24050	self
https://bugzilla.redhat.com/show_bug.cgi?id=2069833	external
https://www.cve.org/CVERecord?id=CVE-2022-24050	external
https://nvd.nist.gov/vuln/detail/CVE-2022-24050	external
https://access.redhat.com/security/cve/CVE-2022-24051	self
https://bugzilla.redhat.com/show_bug.cgi?id=2068233	external
https://www.cve.org/CVERecord?id=CVE-2022-24051	external
https://nvd.nist.gov/vuln/detail/CVE-2022-24051	external
https://access.redhat.com/security/cve/CVE-2022-24052	self
https://bugzilla.redhat.com/show_bug.cgi?id=2068211	external
https://www.cve.org/CVERecord?id=CVE-2022-24052	external
https://nvd.nist.gov/vuln/detail/CVE-2022-24052	external
https://mariadb.com/kb/en/security/	external
https://access.redhat.com/security/cve/CVE-2022-27376	self
https://bugzilla.redhat.com/show_bug.cgi?id=2074817	external
https://www.cve.org/CVERecord?id=CVE-2022-27376	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27376	external
https://access.redhat.com/security/cve/CVE-2022-27377	self
https://bugzilla.redhat.com/show_bug.cgi?id=2074947	external
https://www.cve.org/CVERecord?id=CVE-2022-27377	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27377	external
https://access.redhat.com/security/cve/CVE-2022-27378	self
https://bugzilla.redhat.com/show_bug.cgi?id=2074949	external
https://www.cve.org/CVERecord?id=CVE-2022-27378	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27378	external
https://access.redhat.com/security/cve/CVE-2022-27379	self
https://bugzilla.redhat.com/show_bug.cgi?id=2074951	external
https://www.cve.org/CVERecord?id=CVE-2022-27379	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27379	external
https://access.redhat.com/security/cve/CVE-2022-27380	self
https://bugzilla.redhat.com/show_bug.cgi?id=2074966	external
https://www.cve.org/CVERecord?id=CVE-2022-27380	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27380	external
https://access.redhat.com/security/cve/CVE-2022-27381	self
https://bugzilla.redhat.com/show_bug.cgi?id=2074981	external
https://www.cve.org/CVERecord?id=CVE-2022-27381	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27381	external
https://access.redhat.com/security/cve/CVE-2022-27383	self
https://bugzilla.redhat.com/show_bug.cgi?id=2074996	external
https://www.cve.org/CVERecord?id=CVE-2022-27383	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27383	external
https://access.redhat.com/security/cve/CVE-2022-27384	self
https://bugzilla.redhat.com/show_bug.cgi?id=2074999	external
https://www.cve.org/CVERecord?id=CVE-2022-27384	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27384	external
https://access.redhat.com/security/cve/CVE-2022-27386	self
https://bugzilla.redhat.com/show_bug.cgi?id=2075005	external
https://www.cve.org/CVERecord?id=CVE-2022-27386	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27386	external
https://access.redhat.com/security/cve/CVE-2022-27387	self
https://bugzilla.redhat.com/show_bug.cgi?id=2075006	external
https://www.cve.org/CVERecord?id=CVE-2022-27387	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27387	external
https://access.redhat.com/security/cve/CVE-2022-27445	self
https://bugzilla.redhat.com/show_bug.cgi?id=2075691	external
https://www.cve.org/CVERecord?id=CVE-2022-27445	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27445	external
https://access.redhat.com/security/cve/CVE-2022-27447	self
https://bugzilla.redhat.com/show_bug.cgi?id=2075693	external
https://www.cve.org/CVERecord?id=CVE-2022-27447	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27447	external
https://access.redhat.com/security/cve/CVE-2022-27448	self
https://bugzilla.redhat.com/show_bug.cgi?id=2075694	external
https://www.cve.org/CVERecord?id=CVE-2022-27448	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27448	external
https://access.redhat.com/security/cve/CVE-2022-27449	self
https://bugzilla.redhat.com/show_bug.cgi?id=2075695	external
https://www.cve.org/CVERecord?id=CVE-2022-27449	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27449	external
https://access.redhat.com/security/cve/CVE-2022-27452	self
https://bugzilla.redhat.com/show_bug.cgi?id=2076145	external
https://www.cve.org/CVERecord?id=CVE-2022-27452	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27452	external
https://access.redhat.com/security/cve/CVE-2022-27456	self
https://bugzilla.redhat.com/show_bug.cgi?id=2075697	external
https://www.cve.org/CVERecord?id=CVE-2022-27456	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27456	external
https://access.redhat.com/security/cve/CVE-2022-27458	self
https://bugzilla.redhat.com/show_bug.cgi?id=2075700	external
https://www.cve.org/CVERecord?id=CVE-2022-27458	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27458	external
https://access.redhat.com/security/cve/CVE-2022-31622	self
https://bugzilla.redhat.com/show_bug.cgi?id=2092354	external
https://www.cve.org/CVERecord?id=CVE-2022-31622	external
https://nvd.nist.gov/vuln/detail/CVE-2022-31622	external
https://access.redhat.com/security/cve/CVE-2022-31623	self
https://bugzilla.redhat.com/show_bug.cgi?id=2092360	external
https://www.cve.org/CVERecord?id=CVE-2022-31623	external
https://nvd.nist.gov/vuln/detail/CVE-2022-31623	external
https://access.redhat.com/security/cve/CVE-2022-32083	self
https://bugzilla.redhat.com/show_bug.cgi?id=2104425	external
https://www.cve.org/CVERecord?id=CVE-2022-32083	external
https://nvd.nist.gov/vuln/detail/CVE-2022-32083	external
https://access.redhat.com/security/cve/CVE-2022-32085	self
https://bugzilla.redhat.com/show_bug.cgi?id=2104431	external
https://www.cve.org/CVERecord?id=CVE-2022-32085	external
https://nvd.nist.gov/vuln/detail/CVE-2022-32085	external
https://access.redhat.com/security/cve/CVE-2022-32087	self
https://bugzilla.redhat.com/show_bug.cgi?id=2104434	external
https://www.cve.org/CVERecord?id=CVE-2022-32087	external
https://nvd.nist.gov/vuln/detail/CVE-2022-32087	external
https://access.redhat.com/security/cve/CVE-2022-32088	self
https://bugzilla.redhat.com/show_bug.cgi?id=2106008	external
https://www.cve.org/CVERecord?id=CVE-2022-32088	external
https://nvd.nist.gov/vuln/detail/CVE-2022-32088	external

JSON

To clipboard

Loading 1.7 MB of JSON…

CVE-2022-24050 (GCVE-0-2022-24050)

Vulnerability from cvelistv5 – Published: 2022-02-18 19:51 – Updated: 2024-08-03 03:59

Summary

Severity

7 (High)


                        
                          CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416 - Use After Free

Assigner

zdi mitre root

References

6 references

URL	Tags
https://mariadb.com/kb/en/security/	x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022031…	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA

Impacted products

1 product

Vendor	Product	Version
MariaDB	MariaDB	Affected: 10.6.5

Credits

Anonymous

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T03:59:23.684Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/security/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-364/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220318-0004/"
          },
          {
            "name": "FEDORA-2022-263f7cc483",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
          },
          {
            "name": "FEDORA-2022-03350936ee",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
          },
          {
            "name": "FEDORA-2022-5cfe372ab7",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MariaDB",
          "vendor": "MariaDB",
          "versions": [
            {
              "status": "affected",
              "version": "10.6.5"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Anonymous"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16207."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416: Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-05-08T03:06:43.000Z",
        "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
        "shortName": "zdi"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://mariadb.com/kb/en/security/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-364/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220318-0004/"
        },
        {
          "name": "FEDORA-2022-263f7cc483",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
        },
        {
          "name": "FEDORA-2022-03350936ee",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
        },
        {
          "name": "FEDORA-2022-5cfe372ab7",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "zdi-disclosures@trendmicro.com",
          "ID": "CVE-2022-24050",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MariaDB",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "10.6.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "MariaDB"
              }
            ]
          }
        },
        "credit": "Anonymous",
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16207."
            }
          ]
        },
        "impact": {
          "cvss": {
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-416: Use After Free"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://mariadb.com/kb/en/security/",
              "refsource": "MISC",
              "url": "https://mariadb.com/kb/en/security/"
            },
            {
              "name": "https://www.zerodayinitiative.com/advisories/ZDI-22-364/",
              "refsource": "MISC",
              "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-364/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220318-0004/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220318-0004/"
            },
            {
              "name": "FEDORA-2022-263f7cc483",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
            },
            {
              "name": "FEDORA-2022-03350936ee",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
            },
            {
              "name": "FEDORA-2022-5cfe372ab7",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
    "assignerShortName": "zdi",
    "cveId": "CVE-2022-24050",
    "datePublished": "2022-02-18T19:51:44.000Z",
    "dateReserved": "2022-01-27T00:00:00.000Z",
    "dateUpdated": "2024-08-03T03:59:23.684Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-24051 (GCVE-0-2022-24051)

Vulnerability from cvelistv5 – Published: 2022-02-18 19:51 – Updated: 2024-08-03 03:59

Summary

Severity

7 (High)


                        
                          CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-134 - Use of Externally-Controlled Format String

Assigner

zdi mitre root

References

6 references

URL	Tags
https://mariadb.com/kb/en/security/	x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022031…	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA

Impacted products

1 product

Vendor	Product	Version
MariaDB	MariaDB	Affected: 10.6.5

Credits

Anonymous

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T03:59:23.659Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/security/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-318/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220318-0004/"
          },
          {
            "name": "FEDORA-2022-263f7cc483",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
          },
          {
            "name": "FEDORA-2022-03350936ee",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
          },
          {
            "name": "FEDORA-2022-5cfe372ab7",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MariaDB",
          "vendor": "MariaDB",
          "versions": [
            {
              "status": "affected",
              "version": "10.6.5"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Anonymous"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of a user-supplied string before using it as a format specifier. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16193."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-134",
              "description": "CWE-134: Use of Externally-Controlled Format String",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-05-08T03:06:46.000Z",
        "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
        "shortName": "zdi"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://mariadb.com/kb/en/security/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-318/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220318-0004/"
        },
        {
          "name": "FEDORA-2022-263f7cc483",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
        },
        {
          "name": "FEDORA-2022-03350936ee",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
        },
        {
          "name": "FEDORA-2022-5cfe372ab7",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "zdi-disclosures@trendmicro.com",
          "ID": "CVE-2022-24051",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MariaDB",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "10.6.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "MariaDB"
              }
            ]
          }
        },
        "credit": "Anonymous",
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of a user-supplied string before using it as a format specifier. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16193."
            }
          ]
        },
        "impact": {
          "cvss": {
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-134: Use of Externally-Controlled Format String"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://mariadb.com/kb/en/security/",
              "refsource": "MISC",
              "url": "https://mariadb.com/kb/en/security/"
            },
            {
              "name": "https://www.zerodayinitiative.com/advisories/ZDI-22-318/",
              "refsource": "MISC",
              "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-318/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220318-0004/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220318-0004/"
            },
            {
              "name": "FEDORA-2022-263f7cc483",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
            },
            {
              "name": "FEDORA-2022-03350936ee",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
            },
            {
              "name": "FEDORA-2022-5cfe372ab7",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
    "assignerShortName": "zdi",
    "cveId": "CVE-2022-24051",
    "datePublished": "2022-02-18T19:51:46.000Z",
    "dateReserved": "2022-01-27T00:00:00.000Z",
    "dateUpdated": "2024-08-03T03:59:23.659Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-24052 (GCVE-0-2022-24052)

Vulnerability from cvelistv5 – Published: 2022-02-18 19:51 – Updated: 2024-08-03 03:59

Summary

MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190.

Severity

7 (High)


                        
                          CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

zdi mitre root

References

6 references

URL	Tags
https://mariadb.com/kb/en/security/	x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022031…	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA

Impacted products

1 product

Vendor	Product	Version
MariaDB	MariaDB	Affected: 10.6.5

Credits

Anonymous

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T03:59:23.548Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/security/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-367/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220318-0004/"
          },
          {
            "name": "FEDORA-2022-263f7cc483",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
          },
          {
            "name": "FEDORA-2022-03350936ee",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
          },
          {
            "name": "FEDORA-2022-5cfe372ab7",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MariaDB",
          "vendor": "MariaDB",
          "versions": [
            {
              "status": "affected",
              "version": "10.6.5"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Anonymous"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122: Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-05-08T03:06:38.000Z",
        "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
        "shortName": "zdi"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://mariadb.com/kb/en/security/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-367/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220318-0004/"
        },
        {
          "name": "FEDORA-2022-263f7cc483",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
        },
        {
          "name": "FEDORA-2022-03350936ee",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
        },
        {
          "name": "FEDORA-2022-5cfe372ab7",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "zdi-disclosures@trendmicro.com",
          "ID": "CVE-2022-24052",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MariaDB",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "10.6.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "MariaDB"
              }
            ]
          }
        },
        "credit": "Anonymous",
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190."
            }
          ]
        },
        "impact": {
          "cvss": {
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-122: Heap-based Buffer Overflow"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://mariadb.com/kb/en/security/",
              "refsource": "MISC",
              "url": "https://mariadb.com/kb/en/security/"
            },
            {
              "name": "https://www.zerodayinitiative.com/advisories/ZDI-22-367/",
              "refsource": "MISC",
              "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-367/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220318-0004/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220318-0004/"
            },
            {
              "name": "FEDORA-2022-263f7cc483",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
            },
            {
              "name": "FEDORA-2022-03350936ee",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
            },
            {
              "name": "FEDORA-2022-5cfe372ab7",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
    "assignerShortName": "zdi",
    "cveId": "CVE-2022-24052",
    "datePublished": "2022-02-18T19:51:48.000Z",
    "dateReserved": "2022-01-27T00:00:00.000Z",
    "dateUpdated": "2024-08-03T03:59:23.548Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-27376 (GCVE-0-2022-27376)

Vulnerability from cvelistv5 – Published: 2022-04-12 19:14 – Updated: 2024-08-03 05:25

Summary

MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, which is exploited via specially crafted SQL statements.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

3 references

URL	Tags
https://jira.mariadb.org/browse/MDEV-26354	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022051…	x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2022…	mailing-listx_refsource_MLIST

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T05:25:32.682Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://jira.mariadb.org/browse/MDEV-26354"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220519-0007/"
          },
          {
            "name": "[debian-lts-announce] 20220916 [SECURITY] [DLA 3114-1] mariadb-10.3 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, which is exploited via specially crafted SQL statements."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-09-16T10:06:13.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://jira.mariadb.org/browse/MDEV-26354"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220519-0007/"
        },
        {
          "name": "[debian-lts-announce] 20220916 [SECURITY] [DLA 3114-1] mariadb-10.3 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2022-27376",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, which is exploited via specially crafted SQL statements."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://jira.mariadb.org/browse/MDEV-26354",
              "refsource": "MISC",
              "url": "https://jira.mariadb.org/browse/MDEV-26354"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220519-0007/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220519-0007/"
            },
            {
              "name": "[debian-lts-announce] 20220916 [SECURITY] [DLA 3114-1] mariadb-10.3 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2022-27376",
    "datePublished": "2022-04-12T19:14:17.000Z",
    "dateReserved": "2022-03-21T00:00:00.000Z",
    "dateUpdated": "2024-08-03T05:25:32.682Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-27377 (GCVE-0-2022-27377)

Vulnerability from cvelistv5 – Published: 2022-04-12 19:14 – Updated: 2024-08-03 05:25

Summary

MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

3 references

URL	Tags
https://jira.mariadb.org/browse/MDEV-26281	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022052…	x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2022…	mailing-listx_refsource_MLIST

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T05:25:32.659Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://jira.mariadb.org/browse/MDEV-26281"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220526-0007/"
          },
          {
            "name": "[debian-lts-announce] 20220916 [SECURITY] [DLA 3114-1] mariadb-10.3 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-09-16T10:06:25.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://jira.mariadb.org/browse/MDEV-26281"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220526-0007/"
        },
        {
          "name": "[debian-lts-announce] 20220916 [SECURITY] [DLA 3114-1] mariadb-10.3 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2022-27377",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://jira.mariadb.org/browse/MDEV-26281",
              "refsource": "MISC",
              "url": "https://jira.mariadb.org/browse/MDEV-26281"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220526-0007/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220526-0007/"
            },
            {
              "name": "[debian-lts-announce] 20220916 [SECURITY] [DLA 3114-1] mariadb-10.3 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2022-27377",
    "datePublished": "2022-04-12T19:14:18.000Z",
    "dateReserved": "2022-03-21T00:00:00.000Z",
    "dateUpdated": "2024-08-03T05:25:32.659Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-27378 (GCVE-0-2022-27378)

Vulnerability from cvelistv5 – Published: 2022-04-12 19:14 – Updated: 2024-08-03 05:25

Summary

An issue in the component Create_tmp_table::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

3 references

URL	Tags
https://jira.mariadb.org/browse/MDEV-26423	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022052…	x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2022…	mailing-listx_refsource_MLIST

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T05:25:32.666Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://jira.mariadb.org/browse/MDEV-26423"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220526-0004/"
          },
          {
            "name": "[debian-lts-announce] 20220916 [SECURITY] [DLA 3114-1] mariadb-10.3 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue in the component Create_tmp_table::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-09-16T10:06:26.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://jira.mariadb.org/browse/MDEV-26423"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220526-0004/"
        },
        {
          "name": "[debian-lts-announce] 20220916 [SECURITY] [DLA 3114-1] mariadb-10.3 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2022-27378",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue in the component Create_tmp_table::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://jira.mariadb.org/browse/MDEV-26423",
              "refsource": "MISC",
              "url": "https://jira.mariadb.org/browse/MDEV-26423"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220526-0004/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220526-0004/"
            },
            {
              "name": "[debian-lts-announce] 20220916 [SECURITY] [DLA 3114-1] mariadb-10.3 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2022-27378",
    "datePublished": "2022-04-12T19:14:19.000Z",
    "dateReserved": "2022-03-21T00:00:00.000Z",
    "dateUpdated": "2024-08-03T05:25:32.666Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-27379 (GCVE-0-2022-27379)

Vulnerability from cvelistv5 – Published: 2022-04-12 19:14 – Updated: 2024-08-03 05:25

Summary

An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

3 references

URL	Tags
https://jira.mariadb.org/browse/MDEV-26353	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022052…	x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2022…	mailing-listx_refsource_MLIST

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T05:25:32.662Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://jira.mariadb.org/browse/MDEV-26353"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220526-0005/"
          },
          {
            "name": "[debian-lts-announce] 20220916 [SECURITY] [DLA 3114-1] mariadb-10.3 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-09-16T10:06:10.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://jira.mariadb.org/browse/MDEV-26353"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220526-0005/"
        },
        {
          "name": "[debian-lts-announce] 20220916 [SECURITY] [DLA 3114-1] mariadb-10.3 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2022-27379",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://jira.mariadb.org/browse/MDEV-26353",
              "refsource": "MISC",
              "url": "https://jira.mariadb.org/browse/MDEV-26353"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220526-0005/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220526-0005/"
            },
            {
              "name": "[debian-lts-announce] 20220916 [SECURITY] [DLA 3114-1] mariadb-10.3 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2022-27379",
    "datePublished": "2022-04-12T19:14:19.000Z",
    "dateReserved": "2022-03-21T00:00:00.000Z",
    "dateUpdated": "2024-08-03T05:25:32.662Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-27380 (GCVE-0-2022-27380)

Vulnerability from cvelistv5 – Published: 2022-04-12 19:14 – Updated: 2024-08-03 05:25

Summary

An issue in the component my_decimal::operator= of MariaDB Server v10.6.3 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

3 references

URL	Tags
https://jira.mariadb.org/browse/MDEV-26280	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022052…	x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2022…	mailing-listx_refsource_MLIST

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T05:25:32.683Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://jira.mariadb.org/browse/MDEV-26280"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220526-0007/"
          },
          {
            "name": "[debian-lts-announce] 20220916 [SECURITY] [DLA 3114-1] mariadb-10.3 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue in the component my_decimal::operator= of MariaDB Server v10.6.3 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-09-16T10:06:37.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://jira.mariadb.org/browse/MDEV-26280"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220526-0007/"
        },
        {
          "name": "[debian-lts-announce] 20220916 [SECURITY] [DLA 3114-1] mariadb-10.3 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2022-27380",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue in the component my_decimal::operator= of MariaDB Server v10.6.3 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://jira.mariadb.org/browse/MDEV-26280",
              "refsource": "MISC",
              "url": "https://jira.mariadb.org/browse/MDEV-26280"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220526-0007/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220526-0007/"
            },
            {
              "name": "[debian-lts-announce] 20220916 [SECURITY] [DLA 3114-1] mariadb-10.3 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2022-27380",
    "datePublished": "2022-04-12T19:14:20.000Z",
    "dateReserved": "2022-03-21T00:00:00.000Z",
    "dateUpdated": "2024-08-03T05:25:32.683Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-27381 (GCVE-0-2022-27381)

Vulnerability from cvelistv5 – Published: 2022-04-12 19:14 – Updated: 2024-08-03 05:25

Summary

An issue in the component Field::set_default of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

3 references

URL	Tags
https://jira.mariadb.org/browse/MDEV-26061	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022051…	x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2022…	mailing-listx_refsource_MLIST

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T05:25:32.667Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://jira.mariadb.org/browse/MDEV-26061"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220519-0006/"
          },
          {
            "name": "[debian-lts-announce] 20220916 [SECURITY] [DLA 3114-1] mariadb-10.3 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue in the component Field::set_default of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-09-16T10:06:17.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://jira.mariadb.org/browse/MDEV-26061"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220519-0006/"
        },
        {
          "name": "[debian-lts-announce] 20220916 [SECURITY] [DLA 3114-1] mariadb-10.3 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2022-27381",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue in the component Field::set_default of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://jira.mariadb.org/browse/MDEV-26061",
              "refsource": "MISC",
              "url": "https://jira.mariadb.org/browse/MDEV-26061"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220519-0006/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220519-0006/"
            },
            {
              "name": "[debian-lts-announce] 20220916 [SECURITY] [DLA 3114-1] mariadb-10.3 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2022-27381",
    "datePublished": "2022-04-12T19:14:20.000Z",
    "dateReserved": "2022-03-21T00:00:00.000Z",
    "dateUpdated": "2024-08-03T05:25:32.667Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-27383 (GCVE-0-2022-27383)

Vulnerability from cvelistv5 – Published: 2022-04-12 19:14 – Updated: 2024-08-03 05:25

Summary

MariaDB Server v10.6 and below was discovered to contain an use-after-free in the component my_strcasecmp_8bit, which is exploited via specially crafted SQL statements.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

3 references

URL	Tags
https://jira.mariadb.org/browse/MDEV-26323	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022051…	x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2022…	mailing-listx_refsource_MLIST

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T05:25:32.646Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://jira.mariadb.org/browse/MDEV-26323"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220519-0006/"
          },
          {
            "name": "[debian-lts-announce] 20220916 [SECURITY] [DLA 3114-1] mariadb-10.3 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "MariaDB Server v10.6 and below was discovered to contain an use-after-free in the component my_strcasecmp_8bit, which is exploited via specially crafted SQL statements."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-09-16T10:06:11.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://jira.mariadb.org/browse/MDEV-26323"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220519-0006/"
        },
        {
          "name": "[debian-lts-announce] 20220916 [SECURITY] [DLA 3114-1] mariadb-10.3 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2022-27383",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "MariaDB Server v10.6 and below was discovered to contain an use-after-free in the component my_strcasecmp_8bit, which is exploited via specially crafted SQL statements."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://jira.mariadb.org/browse/MDEV-26323",
              "refsource": "MISC",
              "url": "https://jira.mariadb.org/browse/MDEV-26323"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220519-0006/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220519-0006/"
            },
            {
              "name": "[debian-lts-announce] 20220916 [SECURITY] [DLA 3114-1] mariadb-10.3 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2022-27383",
    "datePublished": "2022-04-12T19:14:21.000Z",
    "dateReserved": "2022-03-21T00:00:00.000Z",
    "dateUpdated": "2024-08-03T05:25:32.646Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2022:6443

CVE-2022-24050 (GCVE-0-2022-24050)

CVE-2022-24051 (GCVE-0-2022-24051)

CVE-2022-24052 (GCVE-0-2022-24052)

CVE-2022-27376 (GCVE-0-2022-27376)

CVE-2022-27377 (GCVE-0-2022-27377)

CVE-2022-27378 (GCVE-0-2022-27378)

CVE-2022-27379 (GCVE-0-2022-27379)

CVE-2022-27380 (GCVE-0-2022-27380)

CVE-2022-27381 (GCVE-0-2022-27381)

CVE-2022-27383 (GCVE-0-2022-27383)

Tags

Sightings

Nomenclature